49460 matches found
CLSA-2026-1773188110 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.1.post6+tuxcare...
CLSA-2026-1772151046 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 3.4.8.post5+tuxcare...
CLSA-2025-1757635895 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.post4+tuxcare...
GHSA-CVHV-G4RQ-3HMW
creationtimestamp| type| source ---|---|--- 2026-08-04 14:30:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7zzqhcc2s...
CVE-2026-63252
creationtimestamp| type| source ---|---|--- 2026-08-04 14:08:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ggd656zxllch5 2026-08-06 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msg4cdo23s2r...
CVE-2026-6837
creationtimestamp| type| source ---|---|--- 2026-08-04 14:06:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msb6peubta2r 2026-08-04 14:06:56+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117037623751892634 2026-08-17 18:00:04+00:00| seen|...
CVE-2025-5999
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/124 2026-08-05 00:00:30+00:00| published-proof-of-concept| https://t.me/purpleshift/124 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen|...
CVE-2026-18612
creationtimestamp| type| source ---|---|--- 2026-08-04 12:16:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msayjnlhrc2j 2026-08-04 12:16:19+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117037188953476018 2026-08-04 16:00:44+00:00| seen|...
CVE-2026-45694
creationtimestamp| type| source ---|---|--- 2026-08-04 11:55:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msaxdwrux325 2026-08-12 16:35:07+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-jmqm-f8q4-v7wx...
Thumbor has path traversal via post-validation URL decoding bypass in file_loader
The fileloader performs unquote on the file path AFTER the abspath + startswith security check. An attacker can use percent-encoded path traversal sequences %2e%2e for .. that pass the security check as literal directory names, but are then decoded to actual .. traversal sequences. Affected...
PYSEC-2026-3621 Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
Summary Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. Details - Filter implementation: thumbor/filters/proportion.py - value is parsed ...
Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS
SummaryThumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. Details- Filter implementation: thumbor/filters/proportion.py - value is parsed as...
Exploit for CVE-2026-67340
CVE-2026-67340 — ArcadeDB JAVASCRIPT Trigger-Script RCE post-...
CVE-2026-14804
creationtimestamp| type| source ---|---|--- 2026-08-04 10:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7yueqk4ra6t2i 2026-08-04 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msasmexj4i2b 2026-08-04 10:30:35+00:00| seen|...
CVE-2026-14175
creationtimestamp| type| source ---|---|--- 2026-08-04 10:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe 2026-08-04 11:34:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g 2026-08-04 12:00:28+00:00| seen|...
CVE-2026-15233
The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users with the Editor role or Contributor/Author when the Nested Pages WordPress plugin before 3.2.15 is enabled for the...
CVE-2026-18739
creationtimestamp| type| source ---|---|--- 2026-08-04 07:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apymxyphnpnax...
CVE-2026-68744
creationtimestamp| type| source ---|---|--- 2026-08-04 07:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aao5xmsbiko4c...